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SUMMARY 

PURPOSE; (U//POUO>To forward to the Intelligence Oversight Board (lOB) of the 
President’s Foreign Intelligence Advisory Board, via the Assistant to the Secretary of Defense 
for Intelligence Oversight (ATSD(IO)), NSA’s quarterly report on its intelligence activities. 

BACKGROUND: (U/ff'OUO) Executive Order 12333 and Executive Order 12863 
require Intelligence Community agency heads and Intelligence Community General Counsels 
and Inspectors General, respectively, to report to the lOB on a quarterly basis concerning 
intelligence activities that they have reason to believe may be unlawful or contrary to Executive 
Order or Presidential Directive. The enclosed memorandum covers all reportable activities 
known to the Inspector General and General Counsel. Per PIOB letter of 6 August 1982, 
Agency heads are responsible for reporting separately any additional reportable activities 
known to them, unless the President has specifically instructed that the Board is not to be 
informed. The Director’s signature signifies that no other activities that require reporting are 
known to him. 
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NATIONAL SECURITY AGENCY 
CENTRAL SECURITY SERVICE 

FORT GEORGE C. MEADE, MARYI_ANO 207S&-6000 


25 November 2003 


MEMORANDUM FOR THE CHAIRMAN, INTELLIGENCE OVERSIGHT BOARD 

THRU: Assistant to the Secretary of Defense (Intelligence Oversight) 

SUBJECT: (U//F0UO7 Report to the Intelligence Oversight Board on NSA 
Activities - INFORMATION MEMORANDUM 


(U //FOUO) Except as previously reported to you or the President, or 
otherwise stated in the enclosure, we have no reason to believe that any intelligence 
activities of the National Security Agency during the quarter ending 30 September 
2003, were unlawful or contrary to Executive Order or Presidential Directive, and 
thus required to be reported pursuant to Section 1.7.(d) of Executive Order 12333. 


(U/;¥OUO^ The Inspector General and the General Counsel continue to 
exercise oversight of Agency activities by means of inspections, surveys, training, 
review of directives and guidelines, and advice and counsel. These activities and 


other data requested by the Bo 
Secretary of Defense (Intellige 



or members of the staff of the Assistant to the 
Oversight) are described in the enclosure. 



^L F. BgfiNNER 
InspectorGsH^al / 

VITO T. POTENZA ^ 

Acting General Counsel 


(U /jTQUO) I concur in the report of the Inspector General and the (^neral 
Counsel and hereby make it our combined report. 

MICHAEL V. HAYDEN 
Lieutenant General, USAF 
Director, NSA/Chief, CSS 


End: 

a/s 


This Memorandum is Unclassified 
Upon Removal of Enclosure 
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1. (U) INSPECTOR GENERAL ACTIVITIES 

a . (C//9I) During this quarter, the Office of Inspector General (OIG) reviewed 
various intelligence activities of the National Security Agency/Central 
Security Service (NSA/CSS) to determine whether they were conducted in 
accordance with applicable statutes, Executive Orders, Attorney General 
procedures, and DoD and internal directives. With few exceptions, the issues 
presented were routine and indicated that the operating elements 
understand the restrictions on NSA/CSS activities. cj! 


(b) (1) 

(b) (3)-P.L. 86-36 


b.'t^'The NSA OIG completed an inspection of th e office of | 

_. The report concluded that 

the intelligence oversight (I/O) program is compliant. All employees receive 
quarterly I/O refresher training, at which time they read relevant I/O 
documents on the NSA Intranet. The I/O point of contact maintains records 
of the training. 


/{b)(3)-P.L. 86-36 


Ithe NSA OIG completed an inspectio n of the T 

1 The joint inspection 

report noted that the site’s I/O program training and documentation are 
sound and meet minimum requirements. The I/O program manager 
continuous to improve the overall program and has an excellent 
unders tanding of I/O. However, I/O knowledge levels vary greatly at the 

I ; operations personnel have good knowledge of I/O, but overall site I/O 
knowledge is weaker. The I/O program manager has thus undertaken to 
increase and sustain the overall knowledge level of non-operations personnel. 


2. (U) GENERAL COUNSEL ACTIVITIES 

-K)//3I) The NSA Office of General Counsel (OGC) reviewed various 
intelligence activities of the NSA/CSS to determine whether they were 
conducted in accordance with applicable statutes. Executive Orders, Attorney 
General procedures, and DoD and internal directives. The OGC advised 
Agency elements on a number of questions, including the collection and 
dissemination of co mmuni cations of or concerning U.S. persons; the reporting 
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of possible violations of federal criminal law contained in SIGINT product; 
the testing of electronic equipment; and the applicability of the Foreign 
Intelligence Surveillance Act (FISA). With few exceptions, the issues 
presented were routine and indicated that the operating elements 
understand the restrictions on NSA/CSS activities. The OGC did not file any 
reports with the Intelligence Oversight Board during this quarter. 

3. (U) SIGINT ACTIVITIES 

a. (S//SI) Collection Against U.S. Persons 


(b)(1) 

(b)(3)-P.L. 86-36 


(1) (U) Intentional 

(Q//OI^During this quarter, t he D IRNSA granted approval for 
consensual collection against^ 1 persons. DIRNSA-approved 
consensual collection against i | U.S. persons was routinely terminated 
this Quarter. 

(b)(1) 

- (S]^/S B“The Attorne y Genera l granted authority to collect the *b) (3) 
communications of | ~| U.S. persons during this quarter, 
including the targeti ng of commimications associated with a U.S.- 
owned and registered 


(b) 


1 ) 


IL. 86-36 
(b)'t3)-ie use 796 
(b). (‘3)-50 use 3024 (i) 


(2) (U) Unintentional 

a. (S//SI//T^F) While collecting the communica tions ofaf 

]the| 


jOffice intercepted a conversation between the[ 


and a person who, based on the contents of the conversa tion, was 
tentatively ide ntified as a| | After 

verifying with I 


office requested a destruction waiver for the intercept as suspected 
criminal activity. The DIRNSA approved a destruction waiver on 


]The 


glistened to the audio 


m 


I and th e| 


[in an unsuccessful effort to 


identify the suspected U.S. person. 


b. {Qff& ifThe, _ 

reporting on the officials of a 


iBranch had bee n targeting and 


After following 


jeompany ow ned by a 


fthe branch discovered on 


that 


(b) (1) 

(b)(3)-P.L. 86-36 
(b)(3)-50 use 3024(i) 


(b)(1) 

(b)(3)-P.L. 86-36 
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Mb)(1) 

<b) (3)-P.L. 86-36 
(b) (3)-18 use 793 
(b)(3)-50 use 3024(i) 


a known associate of this company, whose email address had been 
targeted, was a U.S. person. The branch obtained no intercept from 
tasking the email address and immediately remo ved it from tasking. 
This person was mentioned in one SIGINT report 


however, the info rmation in the re port was not derived from his 
communications. | ~| the report was canceled and 

reissued with the U.S. person’s name minimized. 


(b)(1) 

(b)(3)-P.L, 86-36 


c . (T0//0I) T h J 


I crancn tar& 
] published a report on the Q 


jBranch tai^eted an individual and, on 


that 


included in formation derived from the communications of this 
individual. I I the branch learned that the 


individual is a U.S. permanent resident alien and that a reporting 
waiver exists for him. However, since the report contained information 
obtained from targeting t he individual, which re quires separate 
approva l, it was canceled r i The report was 

reissued ] | with the portion derived from the 

individual’s communications deleted. All hardcopy and computer files 
derived from targeting the individual’s communications have been 


(b)(3)-P.L. 86-36 


.. 86-36 j ^ j 
use 3024<!??troyed. 


d.. (TS//0H r 

update [ 


~i thef 


Branch submitted an 


update wasf 


IWhen the 


information. As a result, ] 
forwarded to raw traffic databases. |_ 


jmessages wer e selected and 
J an analyst 


noticed the increase in collection, determined the cause of the problem , 
and noti fied the mission management office in ] 1 

] corrected the terms and deleted all files that had been ' ^ ^ ^ ^ 


intercepted using the terms. 


(b) 

(b) {3)-P.L. 86-36 


-ffS//SI)[ 


published a properly minimized report that it initially thought was 
based up on incidental collection of a U.S. person’s communications. 
Jsubsequently discovered that the report was based on 


communications derived from targeting the U.S. person’s telephone 
number,] 


^efore |had been aware of the person’s status as a 
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(b) (1) 

(b) (3)-P.L. 86-36 
(b) (3)-50 use 3024(i) 
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i^b) (1) 

..•7r\b) (3)-P.L. 86-36 
' ^ (b) (3)-50 use 3024(i) 


U.S. person, and which ^ad failed to detas k upon lea rning of 


the person’s status. Upon recognizing the mistake, 
the report and detasked the number. 


cancelled 


f.~(T0//Gl)-In the course of targeting the 


Icollected several 


telephone conversations that revealed that a j [ employee was 
appar ently involved in a clandestine romantic relationship with an 
[employee. With the concurrence of the Director, the NSA Actin; 



General Counsel forwarded verbatim transcripts of the calls to the 
General Counsel for him to determine whether the activities reflected 
in the calls represent a potential violation of law that should be 
reported to the Department of Justice. 


g.-f¥ 6// S I) 


contain 


The USA court order in effect at that time did not 
In preparation for reaccessing collection 


manage' 




operations center (OC), 


jonly, gathered ro utine information from the 
^ under the FISA court ord er 
mat ex pired I ] 


that did not contain] ^nd that exp^ 

I The OC had just recently begun to manage 
and the opera tor was not famili ar with FISA restrictions. To correct 
the problems, j [ was included on the court order signed 



The collected data was isolated and destroyed. The 


operator was informed of his obligations under FISA and additional 
training sessions to educate OC operators on FISA collection 
86-36 operations have been scheduled with the OGC. 

h. 0//3I//NP) This quarter, unintentional retrievals usin g the 

[ [ raw traffic fltest3)-P.L. 86-36 

resulted in [ I ncidents against U.S. persons. All incidents were 
reported to responsible oversight officials and corrective actions were 
taken. All unauthorized traffic collected has been destroyed. 


b. (U// FOUQ )-Disseminat[on of U.S. Identities 


(b)(1) 

(b)(3)-P.L. 86-36 


(1) (U) lntentlona[ 

—In acc ordance with section 7 of USSID 18, U.S. identities were 
disseminated [ ~| times during this quarter. The following table 
shows the justification and the number of instances of dissemination: 
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In the “Unmasked” column, the U.S. identity was revealed in a 
serialized end product; in the “User Requested” column, a U.S. identity 
was released to a user at the user’s request. 


JUSTIFICATION 

Unmasked User Requested TOTAL 

7.2.C Necessary 


7.2.C.1 Foreign Official 

7.2.C.3 International Narcotics 

7.2.C.4 Criminal Acti\'ity 

7.2.C.7 U.S. Goverrunent Official 

TOTAL 


(2) (U) Unintentional lb)(3)-p.L. 

(S//ST)'During this quarter, ] p IGINT products were canceled because 
they contained the identities of U.S. persons, organizations, or entities. 

Those products that contained information derived from 
communications of U.S. persons were not reissued. 


86-36 


(3) (U) Raw Traffic Dissemination Outside the SIGINT 
Production Chain 


(b)(1) 

(b)(3)-P.L. 86-36 


I The SID ensures that the personnel are 
trained by the 0(X^ on NSA’s legal restrictions and on proper handling 
and d issemination of SIGINT data ] \ 

I Personnel working in or with SID during the fourth quarter of 
fiscal year 2003 include representatives of the] j (b) (3 )-p.l. 86-36 
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4. (U) OTHER ACTIVITIES 


(U) Assistance to Law Enforcement 


( S //SI) During this quarter, the SID approved i [ requests for 
technical assistance from law enforcement, including requests from the 


(b) (1) 

(b)(3)-P.L. 86-36 



(U) Working Aids 

(U/ /FOUO) T he SID maintains "U.S. Identities in SIGINT" and a 
matrix of blanket reporting waivers on its web page for use by all NSA/CSS 
analysts. The E.O., NSA/CSS Regulation 10-30, DoD Regulation 5240.1-R, 
and USSID 18 are also available on-line. Several offices in SID maintain 
files to be used to prevent targeting of U.S. persons. 

(U) New Guidance 

_ the DIRNSA approved the use of the U.S. | 

SIGINT System ( USSS) to collect, process, and dis seminate SIGINT and 
SIGINT reports on | I within current legal 

authorities and within established tasking priorities, in response to critical 
foreign intelligence needs stated by customers. The USSS may target and 


(b)(1) 

(b) (3)-P.L. 86-36 


that have no expectation of privacy, such as 


(b) (1) 

(b)(3)-P.L. 86-36 
(b)(3)-18 use 798 
(b)(3)-50 use 3024(i) 
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